Course information

OURSE AIM

The aim of this course is to provide students with general and practical knowledge of macOS forensics at a basic level. Training will encompass latest best practice, technologies and techniques available to Law Enforcement Specialists.

Topics include:

• Hardware and operating system overview
• Introduction to file systems and encryption on macOS
• Data acquisition live and post mortem
• Using a Mac as a forensic platform
• macOS and applications artefacts

PREREQUISITES

Prior to the training, the students get provided electronically with preread material which is mandatory to be read and understood. 

This course is a basic level module and relates to macOS Forensics. The target student group includes any international Law Enforcement Agent involved with computer forensics. The students must have basic knowledge about computer forensics, at least taken the basic forensic course or similar or have been working with computer forensics for at least 1 year.

• The student must have basic knowledge in the command line (UNIX/Linux), a pre-read material will be sent out before the course begins.
• The student must have knowledge of computer systems.
• The student must be able to read, write and understand English.